Debian/libvirt: unknown
The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_
Action: Upgrade libvirt to 1.2.9-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.9-4 | - |
Fixed versions
| 1.2.9-4 |
Sources
- osv: DEBIAN-CVE-2014-7823#Debian:13/libvirt
- https://security-tracker.debian.org/tracker/CVE-2014-7823
published · modified · JSON